Articles & Insights
Discover tutorials and insights on CDN performance, edge security, and web infrastructure.
Latest Articles
PHP2Shell: What To Do When You Can't Just Upgrade
Lessons from 200+ servers and PHP back to 5.5: the PHP2Shell upgrade traps, options for end-of-life PHP, a free check script, and an AI agent skill.
Inside a ClickFix Campaign Using Blockchain for Victim Authorization
A four-day investigation of a ClickFix phishing campaign that uses BSC testnet smart contracts for per-victim IP authorization and on-chain payload storage. Full IOC bundle, decoded JavaScript artifacts, on-chain query methodology, and detection guidance.
Automated Bot Attacks on Ecommerce: Impact, Tactics, and Mitigation
A technical guide to how automated bots are affecting ecommerce sites, the attack types involved, their financial impact, and practical mitigation strategies.
From DNS to Web Fingerprints: Introducing DNSArchive Web Search
DNSArchive now goes beyond passive DNS history with a new Web Search feature that fingerprints websites—headers, CMS versions, linked assets, and more—for faster investigations and infrastructure mapping.
Introducing API Security: Access Control Protection
Announcing NOC’s API Security & Access Control: edge-level authentication, authorization, and abuse prevention to keep APIs fast and safe.
How a Web Application Firewall (WAF) and Content Delivery Network (CDN) Mitigate Protocol Attacks
How WAFs and CDNs work together to filter malicious traffic, distribute load, and maintain availability during protocol-layer attacks.
Proactive Website Security with Custom Honeypots — A NOC Feature
Use NOC Custom Rules to build honeypot URLs that only bots should touch—then auto-block scanners with stealth responses to keep attackers unaware.
eCommerce Security: Don’t Host Your Own Payment Pages or Forms
Why merchants should avoid hosting card payment pages and forms, and practical alternatives that reduce risk and PCI scope.
A Guide to Email Security for Domain Owners
A practical guide to SPF, DKIM, DMARC, MTA-STS/TLS-RPT, and BIMI—how to publish DNS records, enforce alignment, monitor reports, stop spoofing, and improve deliverability.
Bringing a Domain to Life: Choosing Between Closed and Open Web Platforms
A practical framework for deciding between closed (SaaS) site builders and open (self-hosted) platforms—covering speed, cost, security, SEO, compliance, extensibility, and long-term portability.
Responding to Security Incidents – Incident Response Plan Basics and Log4Shell
A practical primer on building an incident response plan aligned to NIST CSF, using Log4Shell to walk through identification, prioritization, remediation, and communication.
Registries, Registrars and DNS
A clear primer on the roles of registries, registrars, and DNS—how they interact and what control you actually have over your domain.
Get
Started